[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pin	v4 → v4.4.0
actions/download-artifact	action	pin	v4 → v4.3.0
actions/setup-node	action	pin	v4 → v4.4.0
actions/upload-artifact	action	pin	v4 → v4.6.2
docker/build-push-action	action	pin	v6 → v6.19.2
docker/login-action	action	pin	v3 → v3.7.0
docker/setup-buildx-action	action	pin	v3 → v3.12.0
docker/setup-qemu-action	action	pin	v3 → v3.7.0
github/codeql-action	action	pin	v3 → v3.39.1
oven-sh/setup-bun	action	pin	v2 → v2.2.0
softprops/action-gh-release	action	pin	v2 → v2.6.2

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 8652b021-7e3d-4462-98a3-c5d737a752e5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[tps-flint]

Held (Flint): two things block it. The bun 1.3.10 → 1.4.2 change breaks the nono custom-profile check, and checkout v4.4.0 is not yet on the reviewer action allowlist. A config change in progress keeps bun and node versions moving only together with the reviewer runtime matrix, and adds the v4.4.0 allowlist entry. This PR then regenerates without the bun hunks.